Unrated severityNVD Advisory· Published Nov 3, 2014· Updated Jun 17, 2026

CVE-2014-3654

Description

Multiple cross-site scripting (XSS) vulnerabilities in spacewalk-java 2.0.2 in Spacewalk and Red Hat Network (RHN) Satellite 5.5 and 5.6 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors to (1) kickstart/cobbler/CustomSnippetList.do, (2) channels/software/Entitlements.do, or (3) admin/multiorg/OrgUsers.do.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Red Hat/Satellite2 versions
cpe:2.3:a:redhat:satellite:5.5:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:redhat:satellite:5.5:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:satellite:5.6:*:*:*:*:*:*:*
Red Hat/Satellite With Embedded Oracle
cpe:2.3:a:redhat:satellite_with_embedded_oracle:5.5:*:*:*:*:*:*:*
Red Hat/Spacewalk Java
cpe:2.3:a:redhat:spacewalk-java:2.0.2:*:*:*:*:*:*:*
SUSE S.A./Manager2 versions
cpe:2.3:a:suse:manager:1.7:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:suse:manager:1.7:*:*:*:*:*:*:*
- cpe:2.3:a:suse:manager_server:-:*:*:*:*:*:*:*
Red Hat/Red Hat Network (RHN) Satellitellm-fuzzy
Range: 5.5, 5.6
Spacewalkproject/Spacewalkllm-fuzzy

Patches

Vulnerability mechanics

References

lists.opensuse.org/opensuse-security-announce/2014-10/msg00009.htmlnvdMailing ListPatchVendor Advisory
lists.opensuse.org/opensuse-security-announce/2014-10/msg00010.htmlnvdMailing ListPatchVendor Advisory
rhn.redhat.com/errata/RHSA-2014-1762.htmlnvdVendor Advisory
secunia.com/advisories/60976nvdThird Party Advisory
secunia.com/advisories/62027nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000